See more of our photos online in our Flickr stream Download this presentation's video here


Black Hat USA 2009 Call for papers will open February 1, 2008 and close May 1, 2009. We anticpate that final selections will be made by June 1, 2009.
Online Registration for BH USA 09 will open February 1, 2009.
Black Hat returned to Tokyo for another
Black Hat Japan in October 2008. We brought another strong lineup of
speakers and trainers and the best lineup of technical security
presentations available in Japan. Presentations from the show are online here.
This August, The Black Hat Briefings returned to the venerable Caesars Palace Hotel and Casino for another installment of the premier North American technical information security conference.
Black Hat returned to Europe with an expanded program with four full tracks, more trainings and more intense, comprehensive presentations on the hottest topics in information security.
Black Hat DC was a great success - this year's presentations featured a strong emphasis on the areas of attacks and wireless security.
The Black Hat Briefings have become the biggest and the most important security conference series in the world by sticking to our core value: serving the information security community by delivering timely, actionable security information in a friendly, vendor-neutral environment.
Today, Alexander Sotirov and Jacob Applebaum presented a proof of concept showing an attacker can subvert browser certificate validation and read or alter data sent to secure websites. Read more about their MD5 collision presentation here.
David Litchfield's webcast presentation about his new tool Orablock was very interesting, and now you can catch the replay online.
Web Sync Version Bookmarkable Audio Version
We usually wait until the CFP is closed before we start posting speakers, but we've accepted some speakers for our DC event early. We're pretty excited about how things are shaping up, so we're publishing the speakers page a little early. There will be a lot of changes to this page in the next few weeks, so keep checking back with us.
We've created a Facebook fan page for Black Hat - if you're so inclined you can check it out here.
Black Hat DC's earlybird registration rate will end January 1, so consider registering soon for the best rate. Register online, or learn more about the event here.
Don't forget to sign up for our webcast with David Litchfield and his new Oracle database forensic tool, orablock. Register now, as it promises to be a very interesting presentation.
Bookmarkable audio for all talks is now available in the Japan 08 archive. Lots of good stuff there - please enjoy.
The Blackpages return with an update on all things Black Hat.
Database Security expert David Litchfield will join us to discuss his new paper "Oracle Forensics Part 7: Using the Oracle System Change Number in Forensic Examinations" and his new database forensics tool, orablock. Learn more or register here. .
If you missed our webcast on Clickjacking with Jeremiah Grossman, you can check out the Web Sync replay here and the audio file here.
Techworld.com has an interesting article about the IETF (Internet Engineering Task Force) and their deliberations over the DNS vuln Dan Kaminshky presented at Black Hat USA 2008. You can view Kaminsky's presentation here.
Choice quote: "The DNS is a really old protocol and it is fundamental to the Internet. We're not talking about patching software. We're talking about patching a protocol. We want to make sure that whatever we do doesn't break the Internet."
Black Hat speaker Chris Wysopal has some interesting comments on SecurityFocus about clickjacking - the subject of our most recent webcast. You can read his posting here.
Choice quote: "Clickjacking isn’t going to go away any time soon. Every browser or plug-in that can display a flexible user interface will need to be made more restrictive."
If you're interested in submiting for Black Hat DC, please click here. To submit for Black Hat Europe, the link is here.